Synopsis The Boeing Vertol BV-234 helicopter (serial number MJ001), with two pilots on board, was engaged in heli-logging operations in the Comox Lake area on Vancouver Island, British Columbia. At 1615 Pacific standard time, ground personnel attached a log, estimated to have weighed 16 000 pounds, to the hook at the end of the 250-foot long-line suspended below the helicopter. The helicopter had lifted the log two-thirds of the way off the steep terrain, with one end still in contact with the ground, when it commenced a rapid right turn. In the next 5 to 10 seconds, the helicopter continued to turn rapidly to the right several times, travelled laterally, then descended in a nearly-level attitude and struck the ground. The helicopter broke up at impact and the two pilots suffered fatal injuries; there was a limited post-accident fire. Ce rapport est galement disponible en franais. 1.0 Factual Information 1.1 History of the Flight Earlier on the morning of the accident, the helicopter had flown three cycles(1) for a total of 3.9 hours on logging operations before shutting down for a lunch break. During the first cycle, the pilots had complained about intermittent operation of the lower hook on the long-line and occasional popping of the associated circuit breaker, which seemed to occur during periods of heavy rain. During the refuelling break before the second cycle began, company maintenance engineers examined the hook and the helicopter but found no discrepancies. The helicopter then took off. The pilots reported no further difficulties with the hook system. However, the third cycle was interrupted by an electrical storm and the pilots returned for the lunch break. After the lunch break, the crew completed another 1.9 hours of logging without incident; the crew then returned for fuel and the last planned pilot change-over for the day. At 1541 Pacific standard time (PST),(2) the pilots took off and carried out 10 uneventful turns;(3) the accident occurred on the eleventh turn. At 1615, ground personnel attached a log, estimated to have weighed 16 000 pounds, to the hook at the end of the 250-foot long-line suspended below the helicopter. The helicopter had lifted the log two-thirds of the way off the steep terrain, with one end still in contact with the ground, when witnesses observed the helicopter commence a rapid right turn. In the next 5 to 10 seconds, the helicopter continued to turn rapidly to the right several times, travelled laterally, then descended in a nearly-level attitude and struck the ground. 1.2 Injuries to Persons 1.3 Damage to Aircraft The helicopter struck the ground in a high rate of descent on a 60-degree slope at about 1800 feet above sea level at latitude 4934' north, longitude 12517' west, at the south end of Comox Lake. The blade strike marks of the forward rotor blades on the mountainside are consistent with a flat fuselage attitude at impact. The helicopter broke into three sections at impact, with the breaks at fuselage stations 160 and 440. In general terms, the three sections were as follows: the cockpit, forward rotor, and transmission; the main fuselage; and the aft fuselage section, aft rotor, engines, and aft transmission. The forward section remained in the general area of impact. The 250-foot long-line remained attached to the fuselage belly hook, became entangled in the trees and fallen logs during impact, and held the main fuselage on the slope midway along the wreckage trail. The aft section tumbled some distance down the slope before it came to rest amongst the logs. 1.4 Other Damage A fuel spill resulted from the ruptured fuel tank, and some minor damage was sustained due to the small fire. 1.5 Personnel Information The pilot flying at the time of the accident was also the pilot-in-command and had been employed by Helifor Industries Ltd. for 15 years. He had accumulated a total of about 18 000 flight hours in helicopters, 1000 hours in the BV-234, and another 11 000 hours in a similar tandem rotor helicopter, the BV-107. The pilot held a valid Canadian airline transport helicopter pilot licence (ATPL-H), medical certificate, and endorsements for other light and heavy helicopters. His flying experience included about 11 000 hours in vertical reference(4) and heli-logging operations. His most recent pilot proficiency check (PPC) took place in March 1997, and was carried out with a high degree of competence, as it had been on previous occasions. The pilot-not-flying was acting as the co-pilot during the accident flight and had been employed by Helifor for 19 years, having worked with both light and heavy helicopters. He was a senior captain for the company and had accumulated a total of over 20 000 flight hours, all but 100 of which were in helicopters, with 1200 hours in the BV-234, and 16 000 hours in other tandem rotor helicopters. He held a valid ATPL-H and medical certificate, and was endorsed for other light, medium, and heavy helicopters. Although he was the co-pilot during this mission, he was an experienced vertical reference and logging pilot and was the assistant chief pilot for the BV-234. His most recent PPC took place in March 1997, and was carried out with a high degree of competence, as on previous occasions. 1.6 Aircraft Information The helicopter was owned by Columbia Helicopters of Oregon, U.S.A., and was on lease to Helifor Industries Ltd. of Vancouver. The helicopter was imported into Canada in 1997; the previous U.S. registration for this helicopter was recorded as N234CH. The maintenance records of the helicopter were examined, and no deficiency or discrepancy was found. Records show that the aircraft had been maintained under a progressive maintenance schedule in accordance with existing directives and regulations, and had been thoroughly inspected at 15 044 hours in March 1997. The helicopter had been last weighed in June 1996. The empty weight had been recorded as 21 697 pounds; with modifications, the present empty weight was about 22 500 pounds. At the time of the accident, the total weight of the helicopter was about 24 400 pounds, including the crew at 375 pounds (estimated) and 1500 pounds of fuel. The maximum certificated weight of the BV-234 helicopter with internal loads only is 48 500 pounds. The maximum certificated weight of the BV-234 helicopter when carrying external cargo is 51 000 pounds. With the log attached and free of the ground, the helicopter would have weighed about 40 400 pounds. The helicopter's centre of gravity at the time of the accident was estimated to have been within acceptable limits. 1.7 Meteorological Information The operating environment was unremarkable relative to other heli-logging operations and sites. The weather conditions during the period leading up to the accident were reported as being overcast, light wind, and occasional light rain showers. These conditions are consistent with this operation's visual meteorological conditions requirements. The operating terrain, environment, and weather are not considered to be contributing factors in this accident. 1.8 Aids to Navigation 1.9 Communications 1.10 Aerodrome Information 1.11 Flight Recorders The helicopter was not equipped with either a cockpit voice recorder or flight data recorder, nor was either required by regulation. 1.12 Wreckage and Impact Information The quantity of fuel remaining in the fuel tanks was checked after the fuselage was recovered from the mountain side. Tank No.1 contained about 125 Imperial gallons, and tank No.2 contained about 70 Imperial gallons; however, the latter tank had ruptured on impact and an unknown amount of fuel was lost. Fuel samples taken from the helicopter after the accident were tested for contamination; none was found. Neither fuel exhaustion nor contamination is considered to have been a contributing factor in this accident. Following a preliminary examination of the wreckage at the site, the entire helicopter was transported to secure facilities and examined in greater detail. The airframe, engines, and ancillary systems were critically examined; particular attention was focussed on the helicopter flight controls and hydraulic systems, the auto-pilot, the drive train, and the engines and related systems. After detailed examination of the components, a basic reconstruction of the airframe and rotor systems was completed. No anomalies were noted with either the airframe or the rotor systems, and systematic examination revealed that all component breakage and damage were attributable to the impact forces. The BV-234 was powered by two Allied Signal (Lycoming) AL5512 gas-turbine engines. An examination of the engines, the engine mounts, the controls, and the ancillary accessories revealed no indication of any malfunction, defect, or anomaly. The engine inspection revealed damage to both engines resulting from the impact. The engines were also found to have been at a low power setting. No anomaly was found with the engines' maintenance histories. The engines are not considered to have contributed to the loss of control. Examination of the helicopter's drive train system, transmissions, synchronizing shafts, and drive shafts, as well as the complete rotor system revealed no pre-impact failures. The entire flight control system consists of levers, connecting links, bellcranks, and actuators located within the cockpit, the forward cabin section, the tunnel on top of the main cabin section, the aft cabin section, and the forward transmission fairing and pylon. The flight control system transfers the pilots' cockpit control movements to the two rotor heads to maintain helicopter attitude, altitude, heading, and speed. The hydraulic flight control system consists of two similar but independent systems, identified as No.1 and No.2 hydraulic systems, and provides hydraulic assistance (or boost) to the pilots for flight control movements. Each system operates at a pressure of 3000 pounds per square inch (psi), with a range between 2500 and 3200 psi pressure; each has its own hydraulic tank, pump, valves, filters, and fittings, but the actuators are dual assemblies. Actuators powered by the hydraulic systems are of three basic types: dual upper boost actuators (UBAs) for eliminating rotor loads from the control systems; dual lower stick-boost actuators (LBAs) for eliminating control weight and friction forces; and dual extensible link actuators (ELAs) to provide automatic flight control system (AFCS) inputs to the mechanical flight control system. There are four LBAs, one each for the pitch, roll, and yaw axes, and one for thrust (or collective), and three ELAs, one each for the pitch, roll, and yaw axes. Pressurized fluid flows from the tanks to the flight control pumps and to the actuators; return fluid from the actuators flows back to the tanks. Each system provides hydraulic pressure to operate the two UBAs in both the forward and aft pylons, the three ELAs, and the four LBAs. Since each actuator is a dual element, the flight controls can be operated on a single system; however, it is impossible to control the helicopter without hydraulic system power. Figure 1 -Schematic of flight control system The flight control system was examined, and where possible, examined as installed in the accident helicopter. The components were then removed and systematically examined in greater detail. Impact damage to the yaw pedals showed that the left pedal was fully forward, the yaw connecting link had broken in compression, some rod ends beyond the mixing unit had broken in tension, and the walking beams had broken in overload. During the examination of the actuators in the flight control closet, it was noted that the walls of the enclosure were wet with hydraulic fluid. The actuators were removed, identified, and transported for examination and functionality check. Other than impact damage, no anomalies were found with any of the actuators, except for the damage to the yaw LBA. The hydraulic flight control system was examined entirely. The hydraulic tanks were found empty except for traces of hydraulic fluid. The fluid was similar in texture and colour to MIL-H-5606B, which is the specified fluid. The hydraulic flight boost pumps, flight boost manifolds, lower control modules, emergency hydraulic pump, and AFCS pressure filters were examined and functionally checked. Other than impact damage and the effects of the damage on the components functionality, no discrepancies were found. Analyses of the samples of the hydraulic fluid collected during these examinations determined that most were normal. However, some samples had a slightly-elevated water content which was attributed to rain contamination after the accident and during the recovery and transportation of the wreckage. The yaw LBA (part number 234HS560-3 / serial number 0053V) had accumulated 5443 hours total time since new and consists of two separate actuators--the upper and the lower units. The upper actuator is supplied with hydraulic pressure from the No.2 hydraulic system, and the lower actuator is supplied by the No.1 hydraulic system. Each unit is designated by its respective hydraulic system. The seal around the actuating rod in the No.1 (lower) yaw LBA was found extruded from around the rod, and functional bench-testing revealed a slight leak from the broken seal. Functional testing also revealed that the No.2 yaw LBA would not maintain hydraulic pressure, and a rupture about one inch long was found in the cylinder wall. The actuator was then examined by three independent laboratories to determine the mode of failure and to identify the actuator material. These examinations determined that the cylinder wall exhibited no signs of progressive failure in the form of pre-cracking, and it is believed to have burst in a single, instantaneous manner. The material was identified as the AA7075 alloy specified by the manufacturer. Measurements and engineering analysis of the burst actuator cylinder revealed that the cylinder had ruptured outwardly, and when the cylinder burst, the piston had been in a position that was consistent with normal and static right yaw pedal input made by the pilot. This action would have positioned the associated servo valve in the closed or slightly-open position. Fracture analysis shows that when the LBA cylinder burst, the piston moved down from a nearly centred position to bottom and fractured the yaw connecting link. The seal around the actuating rod in the No.2 (upper) roll LBA was found extruded from around the rod, and is considered to have been squeezed out during airframe breakup. The upper cylinders of the pitch and roll LBAs were measured and no sign of distortion from overpressure was noted. It is estimated that the hydraulic systems would have maintained suitable working pressure for one to two minutes given the in-flight damage to the yaw LBA seen in the accident helicopter. TSB Engineering Laboratory analysis of the two hydraulic gauges concluded that 1800 and 2650 psi hydraulic pressure was present in the No.1 and No.2 systems, respectively, at the time of electrical discontinuity during airframe breakup. Furthermore, it was determined that none of the annunciator lights were illuminated at impact. (Refer to LP 180/97.) Information gathered from the helicopter manufacturer indicated that the pressure required to burst the actuator is in the order of 10 000 psi. A flight control system relief valve is located in the lower control pressure control module and is set for 1950 psi maximum, at a flow rate of 3 gallons per minute. The following technical information was obtained from the manufacturer: ...under normal operating conditions, this valve relieves excessive or back-driving pressure in the stick boost actuator when the actuators servo control valve is open to the over-pressurized side of the piston. However, under extremely rapid application of overload to the actuator, when the servo valve is closed or only partially open, very high pressures can be generated within the cylinder due to trapped fluid condition. In such a situation, the trapped/restricted fluid will never reach the relief valve to be relieved. The factual information and circumstances of this accident, along with the operational specifications of the flight control system, were provided to a hydraulic systems specialist, who conducted a series of dynamic hydraulic simulations of the helicopter's flight control system in an effort to achieve the high pressures required, as indicated by the manufacturer, to burst the LBA cylinder wall. The simulations determined that it was possible to achieve the high peak pressures required to burst the LBA cylinder. The yaw connecting link (part number 114C1013-34) was found broken in two at its midpoint, but attached at one end to the LBA and the other to the yaw transfer bellcrank. The sections were examined by the TSB Engineering Laboratory for material analysis and to determine the mode of fracture. Optical binocular microscope examination of the fracture surfaces show an irregular transverse rupture, exhibiting 45-degrees-slant crack surfaces with a uniform matte grey appearance. The fracture was accompanied by a 50-degree-bend, with severe ovalization of the tube cross-section. This examination found no sign of pre-cracking or progressive failure. It was concluded, on the basis of optical microscope examination, that the link had broken in overstress by compression. Independent engineering examinations of the link confirmed that it had broken in column-loading, and determined that the rapid downward force when the cylinder burst was sufficient to break the link at its midpoint and introduce plastic deformation at the fracture site, similar to the bend found. Energy dispersive X-ray analysis determined the link material to be AA2024, consistent with the requirements of the manufacturer. The pitch, roll, and thrust connecting links installed in the flight control closet adjacent to the yaw connecting link were not damaged. Had the yaw connecting link broken as a result of impact, the adjacent links would have been similarly damaged. The AFCS is a dual stabilization system, with independent electrical power and mechanical connections. These two systems operate simultaneously to stabilize the helicopter about the pitch, roll, and yaw axes, and to provide improved control response. Through the use of the flight director, the AFCS automatically maintains selected airspeed, attitude, bank angle, and heading. AFCS control of the aircraft is through movement of the electro-hydraulic and electro-mechanical dual ELAs in the flight control system. The three ELAs--pitch, roll, and yaw--are installed between the LBAs and the flight control mixing complex and each receive distinct electrical inputs from the two AFCS computer units. Each ELA is composed of two single extensible links. System pressure enters each extensible link through a pressure port. The upper extensible link is pressurized by the No.2 hydraulic system and is controlled by the No.2 AFCS computer. Similarly, the lower extensible link is pressurized by the No.1 hydraulic system and controlled by the No.1 AFCS computer. Extending or contracting these links moves the flight controls and, in turn, the pilot valves of the UBAs. Since all AFCS inputs take place after the LBAs, the inputs are not felt in the flight controls by the pilot. The UBAs transfer all pilot control movements into swashplate motion to control pitch of the rotor blades thereby controlling attitude, altitude, heading, and speed of the helicopter. Each AFCS computer is provided with built-in test equipment (BITE) capability. This particular function enables maintenance staff to conduct an operational self-test of each system, and improves diagnosis of system faults. The BITE tests the AFCS computers and all associated actuators, as well as the control position transducers. When a BITE test is conducted on the ground, the ELA is positioned to null. A calibrated command is then sent by the AFCS to the ELA to extend. The ELA would respond, and the feed-back loop would carry this information back to the AFCS. If the AFCS had a failed U12 when the BITE test was conducted, the ELA would move to the fully-extended position when power is applied to the system. Then, when the AFCS commands the ELA to extend, the actuator cannot respond, and the feed-back loop informs the computer identifying an unserviceability. The pre-flight checks before the last take-off revealed a serviceable AFCS. Both AFCS computers were examined and bench-tested. No faults were found with the No.1 AFCS computer. However, bench-testing of the No.2 AFCS computer determined that an integrated circuit component on the A4 yaw axis circuit card, identified as the U12 analog switch, had failed allowing an output of 11 volts direct current (VDC) to the No.2 yaw ELA. Analysis of the switch determined that it had failed as a result of electrical overstress of unknown origin. Since the U12 switch also controls the rate at which the voltage is applied to the ELA, such a failure would cause almost instantaneous ELA movement. Although this same voltage is applied to the ELA during the BITE test, the voltage is slowly ramped up to the 11 VDC value. When maintenance performs the BITE test, the aircraft is on the ground, the engines are not running, no flight control inputs are made, and only one hydraulic system is pressurized. Both AFCS systems had been checked serviceable by the maintenance crew on the morning of the accident, and rechecked by the pilots during take-off; no anomalies were detected. It is standard operating procedure to have the AFCS selected ON during heli-logging operations, and both systems were found selected ON. The pitch, roll, and yaw ELAs were examined and functionally checked where possible; other than impact damage, no discrepancies were noted. Each ELA incorporates lock pistons that engage when the pressure in the respective hydraulic system drops to about 60 psi. During disassembly and examination of the yaw ELA, investigators noted that the lock pistons were in the locked position, consistent with low system hydraulic pressure. It was further noted that the piston slot was torsionally distorted around the lock piston, indicating that the piston was in the slot when the distortion occurred. All of this shows that the ELAs were damaged during airframe destruction and had lost hydraulic pressure before they were damaged. 1.13 Medical Information Based on the autopsy, toxicology, and medical records, there was no indication the crews' performance was degraded by physiological factors. Medical information reveals physical injury to both pilots that is consistent with force being applied to the left yaw pedal at impact. 1.14 Fire There was a small, limited-area, post-accident fire. 1.15 Survival Aspects Both pilots sustained fatal injuries from the disruption and impact forces of the aircraft around them. The pilot-in-command was separated from his seat during the impact and break-up, and medical information confirmed that he had been wearing his lap belt. However, he was not wearing his shoulder harness at the time of impact. The co-pilot remained in his seat during the impact and break-up, and was found a short distance away from the cockpit section. He had not been wearing the shoulder harness portion of his seat restraint. On helicopters used in vertical reference flying, such as the V-234, cockpit dimensions and fuselage width require the pilot flying to lean markedly to one side, usually to the left, to be able to clearly see the long-line and load suspended below the helicopter. It is physically impossible to use the shoulder harness in this position. Pilots in this industry have uniformly adopted a practice of using the lap belt portion, leaving the shoulder harness free. This practice allows the upper torso to lean markedly under the centrifugal forces of a rapid hovering turn. This movement away from the flight controls could make it difficult for a pilot to effectively manipulate the helicopter, and if the centrifugal forces were sufficiently great, it could prevent the pilot from returning to a normal, seated flying position. In heli-logging operations using the BV-234 helicopter, it is standard practice for the pilot flying to occupy the left-hand pilot seat, and for the pilot-not-flying to be in the right-hand seat; the pilots in this accident were seated in this fashion. The pilot flying manoeuvres the helicopter for all phases of flight, while the pilot-not-flying monitors the engines and ancillary systems, records the loads picked up during the cycle, and communicates constantly to the pilot and, from time to time, to the logging ground crew below. This division of workload allows the pilot flying to concentrate solely on manoeuvring the helicopter. At the end of a period of flying, the flight crew will return to the service site to refuel and to exchange places before continuing with another cycle. This flying/non-flying cycle ensures a balanced work-load among the pilots and reduces fatigue. An examination of the work and duty cycles of both pilots involved in this accident revealed that they had followed the rest and duty periods required by regulation. Based on the flight crew's recent personal histories, neither pilot proficiency nor fatigue is considered a contributing factor in this accident.